|
|
1 | package conn; |
| 1 | |
2 | |
| 2 | our @blocklist; |
3 | our %blockuri; |
|
|
4 | our $blockref; |
| 3 | |
5 | |
| 4 | sub read_blocklist { |
6 | sub read_blockuri { |
| 5 | local *B; |
7 | local *B; |
| 6 | my %group; |
8 | my %group; |
| 7 | @blocklist = (); |
9 | %blockuri = (); |
| 8 | if (open B, "<blocklist") { |
10 | if (open B, "<blockuri") { |
| 9 | while (<B>) { |
11 | while (<B>) { |
| 10 | chomp; |
12 | chomp; |
| 11 | if (/^group\s+(\S+)\s+(.*)/i) { |
13 | if (/^group\s+(\S+)\s+(.*)/i) { |
| 12 | $group{$1} = [split /\s+/, $2]; |
14 | $group{$1} = [split /\s+/, $2]; |
| 13 | } elsif (/^!([^\t]*)\t\s*(.*)/) { |
15 | } elsif (/^!([^\t]*)\t\s*(.*)/) { |
| … | |
… | |
| 15 | my @r; |
17 | my @r; |
| 16 | for (split /\s+/, $2) { |
18 | for (split /\s+/, $2) { |
| 17 | push @r, $group{$_} ? @{$group{$_}} : $_; |
19 | push @r, $group{$_} ? @{$group{$_}} : $_; |
| 18 | } |
20 | } |
| 19 | print "not($g) => (@r)\n"; |
21 | print "not($g) => (@r)\n"; |
|
|
22 | push @{$blockuri{$_}}, $g for @r; |
| 20 | push @blocklist, [qr/$g/i, \@r]; |
23 | push @blockuri, [qr/$g/i, \@r]; |
| 21 | } elsif (/\S/) { |
24 | } elsif (/\S/) { |
| 22 | print "blocklist: unparsable line: $_\n"; |
25 | print "blockuri: unparsable line: $_\n"; |
| 23 | } |
26 | } |
| 24 | } |
27 | } |
|
|
28 | for (keys %blockuri) { |
|
|
29 | my $qr = join ")|(?:", @{$blockuri{$_}}; |
|
|
30 | $blockuri{$_} = qr{(?:$qr)}i; |
|
|
31 | } |
| 25 | } else { |
32 | } else { |
| 26 | print "no blocklst\n"; |
33 | print "no blockuri\n"; |
| 27 | } |
34 | } |
| 28 | } |
35 | } |
| 29 | |
36 | |
| 30 | read_blocklist; |
37 | sub read_blockref { |
|
|
38 | local *B; |
|
|
39 | my @blockref; |
|
|
40 | if (open B, "<blockreferer") { |
|
|
41 | while (<B>) { |
|
|
42 | chomp; |
|
|
43 | if (/^([^\t]*)\t\s*(.*)/) { |
|
|
44 | push @blockref, $1; |
|
|
45 | } elsif (/\S/) { |
|
|
46 | print "blockref: unparsable line: $_\n"; |
|
|
47 | } |
|
|
48 | } |
|
|
49 | $blockref = join ")|(?:", @blockref; |
|
|
50 | $blockref = qr{^(?:$blockref)}i; |
|
|
51 | } else { |
|
|
52 | print "no blockref\n"; |
|
|
53 | $blockref = qr{^x^}; |
|
|
54 | } |
|
|
55 | } |
| 31 | |
56 | |
|
|
57 | read_blockuri; |
|
|
58 | read_blockref; |
|
|
59 | |
|
|
60 | use Tie::Cache; |
|
|
61 | tie %whois_cache, Tie::Cache::, $::MAX_CONNECTS * 1.5; |
|
|
62 | |
| 32 | sub conn::access_check { |
63 | sub access_check { |
| 33 | my $self = shift; |
64 | my $self = shift; |
| 34 | |
65 | |
|
|
66 | my $ref = $self->{h}{referer}; |
| 35 | my $uri = $self->{path}; |
67 | my $uri = $self->{path}; |
| 36 | my %disallow; |
68 | my %disallow; |
| 37 | |
69 | |
| 38 | for (@blocklist) { |
70 | $self->err_block_referer |
| 39 | if ($uri =~ $_->[0]) { |
71 | if $self->{h}{referer} =~ $blockref; |
| 40 | $disallow{$_}++ for @{$_->[1]}; |
72 | |
| 41 | } |
|
|
| 42 | } |
|
|
| 43 | |
|
|
| 44 | my $whois = ::ip_request($self->{remote_addr}); |
73 | my $whois = $whois_cache{$self->{remote_addr}} |
|
|
74 | ||= netgeo::ip_request($self->{remote_addr}); |
| 45 | |
75 | |
| 46 | my $country = "XX"; |
76 | my $country = "XX"; |
| 47 | |
77 | |
| 48 | if ($whois =~ /^\*cy: (\S+)/m) { |
78 | if ($whois =~ /^\*cy: (\S+)/m) { |
| 49 | $country = uc $1; |
79 | $country = uc $1; |
| … | |
… | |
| 51 | $self->slog(9, "no country($whois)"); |
81 | $self->slog(9, "no country($whois)"); |
| 52 | } |
82 | } |
| 53 | |
83 | |
| 54 | $self->{country} = $country; |
84 | $self->{country} = $country; |
| 55 | |
85 | |
| 56 | if ($disallow{$country}) { |
86 | $self->err_block_country($whois) |
| 57 | $self->slog(6, "DISALLOW($uri,$country)"); |
87 | if $self->{path} =~ $blockuri{$country}; |
| 58 | |
|
|
| 59 | $whois =~ s/&/&/g; |
|
|
| 60 | $whois =~ s/</</g; |
|
|
| 61 | $self->err(403, "forbidden", { "Content-Type" => "text/html" }, <<EOF); |
|
|
| 62 | <html> |
|
|
| 63 | <head> |
|
|
| 64 | <title>This material is licensed in your country!</title> |
|
|
| 65 | </head> |
|
|
| 66 | <body bgcolor="#ffffff" text="#000000" link="#0000ff" vlink="#000080" alink="#ff0000"> |
|
|
| 67 | |
|
|
| 68 | <h1>This material is licensed in your country!</h1> |
|
|
| 69 | |
|
|
| 70 | <p>My research has shown that your IP address |
|
|
| 71 | (<b>$self->{remote_addr}</b>) most probably is located in this country: |
|
|
| 72 | <b>$country</b> (ISO-3166-2 code, XX == unknown). The full record is:</p> |
|
|
| 73 | |
|
|
| 74 | <pre> |
|
|
| 75 | $whois |
|
|
| 76 | </pre> |
|
|
| 77 | |
|
|
| 78 | <p>My database says that the material you are trying to access is licensed |
|
|
| 79 | in your country. If I would distribute these files to your country I would |
|
|
| 80 | actively <em>hurt</em> the industry behind it, which includes the artists |
|
|
| 81 | and authors of these videos/mangas. So I hope you understand that I try to |
|
|
| 82 | avoid this.</p> |
|
|
| 83 | |
|
|
| 84 | <p>If you <em>really</em> think that this is wrong, i.e. the |
|
|
| 85 | material you tried to access is <em>not</em> licensed in your |
|
|
| 86 | country or your ip address was misdetected, you can write to <a |
|
|
| 87 | href="mailto:licensed\@plan9.de">licensed\@plan9.de</a>. Please explain |
|
|
| 88 | what happened and why you think this is wrong in as much detail as |
|
|
| 89 | possible.</p> |
|
|
| 90 | |
|
|
| 91 | <div align="right">Thanks a lot for understanding.</div> |
|
|
| 92 | |
|
|
| 93 | </body> |
|
|
| 94 | </html> |
|
|
| 95 | EOF |
|
|
| 96 | } |
|
|
| 97 | } |
88 | } |
| 98 | |
89 | |
| 99 | 1; |
90 | 1; |
